nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #267

Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?

The correct answer is B. Use the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic. https://cloud.google.com/compute/docs/connect/ssh-using-iap#gcloud

Submitted by certguy· Mar 30, 2026Configuring access and security

Question

Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?

Options

  • AAttach a public IP to the instances and allow incoming connections from the internet on port 22 for
  • BUse the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic
  • CUse a third party tool to provide remote access to the instances.
  • DCreate a bastion host with public internet access. Create the SSH tunnel to the instance through

How the community answered

(22 responses)
  • A
    18% (4)
  • B
    68% (15)
  • C
    9% (2)
  • D
    5% (1)

Explanation

https://cloud.google.com/compute/docs/connect/ssh-using-iap#gcloud

Topics

#Identity-Aware Proxy#IAP tunnel#SSH access#secure instance access

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice